While I agree this stuff is complex, the patch notes are the only real problem here. Almost all the corrections are around the '"ssh-rsa" public key signature

While I agree this stuff is complex, the patch notes are the only real problem here. Almost all the corrections are around the '"ssh-rsa" public key signature algorithm' deprecation. The string "ssh-rsa" is used in many places, and has different meanings in different places. The notes should have been much more explicit about what is and what is not affected.